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SIMULATOR CART 



This application claims the benefit of U.S. provisional application number 60/126060 
incorporated herein by reference in its entirety. 

5 Field of The Invention 

The field of the invention is test and simulator systems. 

Background of The Invention 

Control systems incorporating PLCs (Programmable Logic Controlers) and DCSs 
(Distributed Control Systems) are frequently used to control real world processes by 

1 0 accepting inputs which typically originate from sensors such as, among others, those used to 
sense temperature, flow, level, radiation, light, movement, and pressure, and those used in 
generating outputs which are used to drive actuators such as hydraulic devices, valves, lights, 
and motors. Control systems can often be viewed as having a control component and an 
interface component, with one or both components having both hardware and software sub- 

1 5 components. Thus a PLC based device might utilize a digital PLC having embedded software 
as the control component (the "controller"), with an interface component (the "I/O interface") 
(a) accepting signals from sensors and converting them into a form acceptable to the PLC, 
and (b) accepting outputs from the PLC and converting them to signals suitable as inputs to 
the actuators. In such systems, the controller and I/O interface are often connected by one or 

20 more paths (the "controller-I/O communication channel) to allow communication and control 
signals to pass between the controller and the I/O interface. Similarly, the I/O interface is, 
after the control system is installed in its operating environment, connected via one or more 
electrical paths (the "field wiring") to the components from which the control system receives 
its inputs, and to the components to which the control system directs its outputs, with the I/O 

25 interface being provided with a plurality of connectors ("field I/O connectors") which 

facilitate connecting the I/O interface with the field wiring. Many control systems will also 
incorporate a human-machine-interface (HMI) component comprising hardware and or 
software for facilitating operator interaction with the control system. 



Although methods and devices for testing control systems are known, they generally 
30 have individual strengths and weaknesses which make them more appropriate in some 
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situations and less appropriate in other. Thus, there is a continuing need for improved 
methods and apparatus for control system testing. 

Summary of the Invention 

Methods and apparatus are provided which allow control systems to be tested. 
5 Specifically, a test system is coupled to a control system in a maimer which allows the test 
system to communicate with and drive the control system by sending and receiving signals 
via both the controller-I/O communication channel and the field I/O connectors. In essence, 
the test system is used to both simulate a plant to be controlled and to monitor, validate, and 
or modify the internal state of the control system controller and possibly the control system 

10 I/O interface. Plant simulation is accomplished by simulating the I/O devices to which the 
control system is coupled (and hence the plant processes) when installed in its operational 
environment. In addition to the simulation of I/O devices, the test system takes advantage of 
the fact that many commonly used controller and I/O interfaces are capable of communication 
with other devices by using such communications ability to provide instructions to or obtain 

1 5 information from a control system's controllers) and I/O interface(s). 

It is contemplated that the methods and apparatus disclosed herein will provide an 
effective approach to connecting a control system to be tested to simulated I/O devices and 
controlling and monitoring the simulated I/O devices so as to produce inputs to the control 
system, to record outputs from the control system, and to compare the recorded outputs 
20 against an expected value and record the result of the comparison for reporting purposes. 

It is also contemplated that the methods and apparatus disclosed herein will provide 
an effective approach to the staging and testing of PLC/HMIs (Programmable Logic 
Controllers/Human Machine Interfaces) and DCSs (Distributed Control Systems) before 
delivery to the field. 

25 It is also contemplated that the methods and apparatus disclosed herein will provide 

an effective mechanism for validating the operation of a control system once it has been 
installed in a plant to be controlled. 

Various objects, features, aspects and advantages of the present invention will become 
more apparent from the following detailed description of preferred embodiments of the 
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invention, along with the accompanying drawings in which like numerals represent like 
components. 

Brief Description of The Drawings 

Fig. 1 is a schematic view of a simulator cart embodying the invention. 

5 Fig. 2 is an alternative schematic view of the simulator cart of figure 1. 

Fig. 3 is a schematic view of a simulator coupled to a plant control system. 

Fig. 4A is a diagram of a preferred layout for components on a first side of a cart 
based simulator. 

Fig. 4B is a diagram of a preferred layout for components on a second side of the 
10 simulator of Fig. 4a 

Fig. 5A is a wiring diagram illustrating a preferred method of interconnection for the 
components of the simulator of Fig. 4A. 

Fig. 5B is a wiring diagram illustrating a preferred method of interconnection for the 
components of the simulator of Fig. 4B. 

15 Fig. 6 is a diagram of a preferred layout for components in a "briefcase" based 

simulator. 

Fig. 7 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to select which test section to run. 

Fig. 8 is a screen capture of a simulator HMI screen wherein an operator is being 
20 prompted to select whether to run a particular test or an entire test procedure. 

Fig. 9 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to perform a first test. 

Fig. 1 0 is a screen capture of a simulator HMI screen wherein the operator is being 
prompted to enter the results of the test of Fig. 9. 
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Fig. 1 1 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to perform a second test. 

Fig. 12 is a diagram of a simulator HMI database table. 

Fig. 13 is a diagram of a simulator HMI database table. 
5 Fig. 14 is a diagram of a simulator HMI database table. 

Fig. 15 is a diagram of a simulator HMI database table. 

Fig. 16 is a diagram of a simulator HMI database table. 

Fig. 17 is a diagram of a simulator HMI database table. 

Fig. 18 is a diagram of a simulator HMI database table. 
10 Fig. 19 is a diagram of a first method embodying the invention. 

Fig. 20 is a diagram of a second method embodying the invention. 

Fig. 21 is a diagram of a third method embodying the invention. 

Fig. 22 is a diagram of a fourth method embodying the invention. 

Fig. 23 is a diagram of a fifth method embodying the invention. 
1 5 Fig. 24 is a diagram of a sixth method embodying the invention. 

Fig. 25 is a diagram of a seventh method embodying the invention. 

Detailed Description 

Referring to figures 1-3, a simulator cart test system ("SIMCart") 10 is coupled to a 
control system to be tested ("target CS") 20. SIMCart 10 includes rolling enclosure 1 10, I/O 
20 simulator modules 120, HMFconfigurator 130, hardcopy device 140, wiring harnesses 150, 
and communication channel 160 connections 161 and 163. Target CS 20 includes enclosure 
210, I/O interfaces 220, field I/O connectors 225, HMI 230, communication channel 160 
connections 261 and 263, and PLC 270. SIMCart 10 uses wiring harnesses 150 to send and 



WO 00/65361 



-5- 



PCT/US00/07962 



receive I/O signals to and from I/O interfaces 220 so as to simulate the input devices/sensor 
50 and output devices/actuators 40 which would be connected via the field wiring 41 and 5 1 
to target CS 20 when target CS 20 is installed. SIMCart 10 uses communications channel 
160 to obtain register and status information from I/O interfaces 220, HMI 130 and PLC 270. 
5 By monitoring the internal state of and data flow between I/O interfaces 220, HMI 1 30 and v 
PLC 270, SIMCart 10 is better able to isolate any problems which may occur in target CS 20 
during testing as occurring in a particular subsystem of target CS 20. The manner in which 
SIMCart 10 is coupled to target CS 20 also permits SIMCart 10 to test multiple I/O channels 
and or subsystems of target CS 20 simultaneously. 

f ^ 1 0 The SIMCart is automatically initialized by utilizing communications channel 1 60 to 

query target CS 20 to obtain information which allows SIMCart 10 to perform automatic 
yj initialization and mapping of its input and outputs to those of target CS 20. SIMCart 10 

incorporates a knowledge base which includes characteristics of known control system 
hardware and software components in perfoiming such automatic initialization. It is 
s 15 contemplated that the knowledge base might be extended to include mathematical models of 
7^ standard components such as sensors and actuators to allow SIMCart 10 to better simulate 

^ such components and to allow automatic test generation for target systems winch will be 

C3 coupled to such components. Figures 12-18 show some of the fields and data which might be 

~ used in maintaining such a knowledge base. 

20 SIMCart 1 0 is contemplated as being beneficial in the development and off-site 

testing of target CS 20 by simulating the plant which target CS 20 is intended to control. If 
the capacity of a single SIMCart 10 is insufficient to simulate an entire plant, multiple 
SIMCarts 10 can be used to achieve the simulation. Such a combination of SIMCarts 10 may 
utilize multiple HMI 130 devices, or may share a single HMI 130. SIMCart 10 is also 

25 contemplated as being beneficial for off-site training of personnel in the operation of target 
CS 20 when SIMCart 10 is used in conjunction with target CS 20. Such off-site use of 
SIMCart 10 is contemplated as providing, among others, complete testing of all target CS 20 
inputs and resulting outputs before field installation 

On-site testing is also contemplated as benefiting from the use of SIMCart 10, either 
30 in its entirety or only its configurator/HMI portion. Once target CS 20 is installed in its 
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operational environment, configurator 130 can be used as a test and validation tool. The 
configurator 130 can provide step-by step instructions to a field tester which, if followed, 
result in a desired level of testing of target CS 20, By doing so, configurator 130 essentially 
controls the test process through the field tester. By requiring feedback from the field tester 
5 upon the completion of various portions of the testing, a test report which includes the tests 
steps performed and the tester responses can be generated so as to provide assurance that the 
required level of testing has be completed. Such "controlled" testing thus provides a method 
of repeatable, validated and verified testing. Configurator 130 can also be used to record the 
results of such testing and to generate reports in the field which provide feedback as to the 
10 current state of target CS 20 and the field wiring to which target CS 20 is coupled. 

If the entire SIMCart 10 is used on-site, SIMCart 10 can be interchanged with selected 
inputs and outputs of target CS 20 so as to allow "live" inputs to cause target CS 20 to 
control simulated actuator components, or to use simulated inputs to cause target CS 20 to 
control "live" actuator components, or to mix and match live and simulated inputs and 
15 outputs as desired. If configurator 130 is still attached to the rest of SIMCart 10 during 
testing, and if SIMCart 10 is coupled to target CS 20 during testing, configurator 130 can 
control the test process both through direct interaction with target CS 20 and through a test 
operator as previously discussed. 

Rolling enclosure 1 10 of SIMCart 10 is preferred to be sized and dimensioned to 
20 house I/O simulator modules 120 and any necessary supporting systems in a manner which 
facilitates the use of SIMCart 10 and its interconnection with target CS 20. 

I/O simulator modules 120 may comprise PLCs or smart I/O systems. The SIMCart 
10 of figure 1 utilizes several Sixnet I/O related products including ST-DI-024-16H, ST-PS- 
024-02N, ST-DO-DC2-16H, ST-AI-20M-16H, ST-AO-20M-08F, ST-DI-120-08U, ST-DO- 

25 AC1-08U, and ST-GT-ETH-24P. Details of the preferred Sixnet products are attached to the 
provisional application as part of its disclosure, said provisional application having 
previoiusly been incorporated by reference herein. Figures 4A and 4B provide a diagram of a 
preferred layout of components in SIMCart 10, and Figures 5 A and 5B provide corresponding 
wiring diagrams showing a preferred method for interconnecting the components of SIMCart 

30 10. 
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An alternative embodiment utilizes a smaller number of components so that a 
SIMCari type simulator can be fit within a carrying case. Figure 6 provides a diagram of a 
preferred layout of components in such an embodiment. 

HMI/configurator 130 of SIMCart 10 is contemplated as being a general purpose 
5 computer such as a laptop PC ("PC"). Portability is particularly desirable as it facilitates the 
transportation of HMI 130 into the field to support on-site testing of an installed target CS 
20. HMI 130 is contemplated as incorporating software which allows testing of alarm 
responses (including deadbands), loops, and logic, and reporting of HMI readouts, trend 
graphs, alarms, reports, system requirements, etc. Test results are stored in the form of 
10 textual date and time stamped data, graphs, and tester responses to prompted questions. 

In a preferred embodiment, HMI 130 includes a multi-tasking operating system, 
preferably Windows NT™, which is capable of supporting a graphical user interface ("GUT') 
and a relational database system (preferably Microsoft Access™), as well as software for 
controlling I/O simulator modules 120, and testing target CS 20. HMI 130 is also preferred to 
15 include an Ethernet network interface card for connection to communication channel 160 

which is preferred to be an TCP/IP based Ethernet network. It is also preferred that HMI 130 
of SIMCart 10 be detachable from the rest of SIMCart 10 to allow it to be used independently 
as an onsite verification tool. 

HMI/configurator 130 provides for downloading test relational databases, initiating 
20 tests and capturing tester responses and comments, and generating reports. The test databases 
include test cases, expected results for test comparison and exception generation. An overall 
test planner database organizes the sequence of test events. Being as the test databases are 
derived from the requirements database, the system owner is assured of lock-step 
configuration control and traceable requirements testing. 

25 It is preferred that configurator 130 utilize a relational database coupled to a GUI to 

allow entry of and storage of test requirements at a high level, and to provide tools for 
deriving lower level sets of test instructions from such high level requirements in a manner 
which maintains a correlation between lower level test sets and higher level requirements. By 
maintaining such a correlation, changes to high level requirements can be quickly, and 
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sometimes automatically, incorporated into the lower level test sets. Such lower level test 
sets will be used to drive and control both automatic and interactive testing of target CS 20. 
By maintaining a correlation between high level and low level requirements, reports showing 
the test steps used to verify satisfaction of the high level requirements through performance of 
5 the low level test sets can be generated. 

It is contemplated that the relational database used by configurator 130 to maintain 
test requirements and instructions should provide for the specification of: (1) initial values, an 
operational range, a deadband, and a physical range for each I/O component to be tested to 
allow the testing of alarms when values are within and outside of such ranges; (2) 

1 0 standardized questions for prompting the operator to perform various functions or to provide 
responses; (3) sets of instuctions and questions for interactive testing (or possibly automatic 
testing) of the HMI portion of target CS 20; (4) parameters for PID loop testing; (5) 
parameters for indicator testing; (6) general target system requirements, as well as supporting 
any other tables required for proper functioning of SIMCart 10. Figure 7 provides a screen 

1 5 capture image of a simulator HMI screen wherein an operator is being prompted to select a 
test section to run. Figure 8 provides a screen capture image of a simulator HMI screen 
wherein an operator is being prompted whether to run a particular test or an entire test 
procedure. Figure 9 provides a screen capture of a simulator HMI screen wherein an operator 
is being prompted to perform a test. Figure 10 provides a screen capture of a simulator HMI 

20 screen wherein an operator is being prompted to enter the result of the test of Figure 9. Figure 
1 1 provides a screen capture of a simulator HMI screen wherein an operator is being 
prompted to perform another test. 

Hardcopy device 140 is preferred to be a printer suitable for connection to HMI 130, 
and for printing hardcopy of tests, test results, and audit information as well as other reports 
25 discussed herein. 

Wiring harnesses 1 50 may take on almost any form so long as they properly transmit 
I/O signals between SIMCart 10 and target CS 20. However, it is preferred that wiring 
harnesses 150 be chosen to facilitate the coupling of target CS 20 to SIMCart 10 and the 
simulation of the field wiring to which target CS 20 will be coupled in its operational 
30 environment It is contemplated that several different harnesses may be included with the 
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SIMCart 10 with each harness being designed to facilitate the coupling of SIMCart 10 to a 
particular type of target CS 20. The inclusion of such pre-configured harnesses is 
contemplated as facilitating the use of SIMCart 10 to test a variety of standard control 
systems such as Allen-Bradley PLC-5 controllers or Siemens S7 controllers,. 

5 Communication channel 1 60 is preferred to be a TCP/IP based Ethernet network and 

is preferred to be shared between SIMCart 10 and target CS 20 to allow flexible interaction 
between HMI 130, I/O simulator modules 120, HMI 230, PLC 270, and I/O interface 220. 
However, it is contemplated that other communication methods such as RS-232 interfaces, 
token ring networks, FDDI networks, proprietary control busses, etc. may also be used to 
1 0 provide a communication channel between one or more components of SIMCart 10 and target 
CS 20. 

As previously discussed, the HMI/configurator portion 130 of SIMCart 10 is useful 
both in the operation of SIMCart 10, but also as a detachable validation and/or training tool. 
It is contemplated that HMI/configurator 130 comprise the software and one or more 

15 databases necessary to allow it to perform its training and/or validation functions. Such 

functions might include, among others, the ability to control access by requiring an operator 
to log in, the ability to simulate a particular function and to test the capability of the target CS 
to respond to a sensor's entire range of input, the ability to prompt the operator to perform 
operations using the target CS HMI, and automatically performing tests against target CS 

20 when such tests do no require manual operations by an operator. 

Thus, a particular configurator embodiment is likely to have the ability to store and 
run multiple tests wherein each test comprises one or more steps. In running a particular test 
or sequence of test steps, the configurator will prompt the operator to perform a function on 
the target CS whenever manual intervention by the operator is required, but will automatically 

25 (i.e. without operator action) run through any tests steps which do not require such manual 
intervention. Thus, to test a pump, the configurator may prompt an operator to turn on the 
pump, then, after the operator has indicated to the configurator that he has turned on the 
pump, the configurator will ask a question to verify proper operation of the pump such as 
"Did the pump indicator light turn on?" which the operator can either respond to affirmatively 

30 or negatively. If negatively, the configurator will prompt the operator to enter a comment as 
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to what response by the target CS was actually seen. During another step, the configurator 
may generate simulated events to which the target CS has automated responses which can be 
detected by the configurator and in which case the simulator will simply simulate the events 
and monitor the target CS's response. As an example, if a power voltage level exceeds a 
5 threshold amount the target CS may be required to cut off the source of power. Such a test 
would be performed by the simulator at the appropriate point in a test sequence by sending an 
over voltage signal to the target CS and monitoring the response of target CS to see if a power 
cutoff signal is sent. Test results, whether operator responses or automatically monitored 
events/values are also stored in one or more databases so that an exceptions report comparing 
10 actual target CS responses to expected results can be generated. 

It is contemplated that the configurator will comprise a scalable library of test 
databases and test functions utilizing the test databases to perform the test steps. Utilizing 
database tables to store tests and test parameters allows a tester to add new tests and/or test 
scenarios, and also to modify parameters for existing tests. Such scalable libraries and 
1 5 dynamic updates make for a much more robust and flexible system. 

Figures 12-18 show some of the fields and data which might be included. The table of 
Figure 12 is an "Alarm" table and includes, possibly among others, the fields TagName, 
Initial, LL_Limit, LJLimit, HJLimit, HHJLimit, and Deadband The table of Figure 13 is an 
"Alarm G" table and includes, possibly among others, the fields Alm_Ind, QNum, Type, and 

20 Question. The table of Figure 14 is an "Indication" table and includes, possibly among others, 
the fields ID, TagName, Description, EUZero, EUMax, and Eunit. The table of Figure 15 is 
an "PID Loop" table and includes, possibly among others, the fields PIDJNumber, 
Loop__Desc, Process JTagName, Min_EU, Max__EU, and EU_Name_SetPoint_TagName. The 
table of Figure 16 is an "Section IQ" table and includes, possibly among others, the fields ID, 

25 SectionNum, SectionStep, and Instruction. The table of Figure 17 is a "Section List" table and 
includes, possibly among others, the fields Num and Name. The table of Figure 1 8 is an 
"SysReqs" table and includes, possibly among others, the fields ID, Section, Requirement, 
and Question, 

SIMCart 10 is contemplated as being particularly well suited for a number of uses 
30 when taken to an operational facility and connected in place of all or part of the field wiring 
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including but not necessarily limited to: (1) testing existing logic for reaction to new 
scenarios; (2) testing new logic for operations; (3) training process operators prior to an 
operational campaign to a) score and validate operator readiness, b) identify deficient training 
areas, and c) ensure operational readiness as an overall team; (4) training process operators at 
5 the operational facility using by plugging SIMCart 1 0 in in place of the plant's actual sensors 
and actuators; (4) field trouble shooting of wiring and other field related problems. 

First Example Application 

An example application of SIMCart 1 0 is its in revalidating a PLC program used to 
manufacture a drug wherein the PLC does so by controlling ingredient weighing, heating, 

1 0 cooling, tank level control, pump control, and other portions of the manufacturing process. 
This example refers to target CS 20 as if it were the system to be re-validated. Revalidation 
of the PLC program of target CS 20 would involve first using the SIMCart 10 to perform off- 
site testing of target CS 20, and then detaching the HMI/Configurator from the rest of 
SIMCart 10 and taking it on-site in the field with target CS 20 when target CS 20 is installed 

15 at the drug production facility. 

During off-site/lab testing, I/O simulation modules 120 are used to provide an input to 
each of the PLC I/O channels via field I/O connectors 225. The SIMCart automatic 
initialization routines create a mapping between the target PLC and SIMCart I/O channels. A 
tester would log into the SIMCart configurator computer/HMI 130 (requiring operators to log 

20 in facilitates future auditing). After logging in, test databases are downloaded from a 
requirements database that was established for target CS 20 at the project start. The test 
databases are then used to test all functions of the PLC, HMI and network including alarms, 
loops, and field wiring to satisfy the testing requirement contained in the test databases. Such 
testing is accomplished via a series of automatic tests, as well as tests which prompt the 

25 operator to perform certain actions and to provide responses/inputs to the HMI after 
performing such actions. The testing of alarms includes the testing of deadbands, and 
appropriate low-low, low, high, and high-high alarm ranges as well as other types of data 
deltas. All data can be stored electronically with a date and time stamp as well as with other 
audit information as necessary. 
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Once off-site/lab testing is complete, the SIMCart configurator/HMI 130 is datached 
from theSIMCart and target CS 20 and taken to the field to be used onsite to test target CS 20 
once it is installed in the drug production facility. In the field, the SIMCart configurator 
provides a field tester with a series of tests related to field I/O and wiring connections. For 
5 some tests, the field tester is prompted by the SIMCart configurator to instruct a technician, 
possibly via cell-phone, to input signals to the system which will be passed to target CS 20 
via the field wiring. The SIMCart configurator 130 then prompts the field tester to enter 
responses answering questions related to the feedback HMI 230 of target CS 20 provided to 
the tester in response to the technician's inputs. All test questions and results are stored so as 
10 to allow a report of test results to be generated. 



Second Example Application 
Once test target CS 20 is installed in the drug production facility, SIMCart 10 can 
periodically be used to train process operators. Such training can be done on site, using the 
target CS 20 HMI by simply disconnecting target CS 20 from the plants sensors and 
15 actuators, probably by disconnecting the field wiring, and connecting SIMCart 10 to target CS 
20 in place of the sensors and actuators. Once target CS 20 is operating with simulated I/O 
rather than live sensors and actuators, operators are free to interact with target CS 20 without 
any fear of consequences to the plant. When used in such a manner, the test procedures used 
to validate target CS 20 may be used in training operators, or else SIMCart 20 may 
incorporate specific software and/or data for training operators. Such software and/or data 
may incorporate multi-media presentations such as training videos. SIMCart 20 may also 
work partially or completely independently of the operator so as to simulate events, track 
operator responses to the simulated events, and/or report on the quality of the operator's 
responses, without the operator having to interact with SIMCart 20 during training. 

25 Thus, specific embodiments and applications of devices and methods for plant control 

system testing have been disclosed. It should be apparent, however, to those skilled in the art 
that many more modifications besides those already described (including the methods shown 
in Figures 19-26) are possible without departing from the inventive concepts herein. The 
inventive subject matter, therefore, is not to be restricted except in the spirit of the appended 

30 claims. Moreover, in interpreting both the specification and the claims, all terms should be 
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interpreted in the broadest possible manner consistent with the context In particular, the 
terms "comprises" and "comprising" should be interpreted as referring to elements, 
components, or steps in a non-exclusive manner, indicating that the referenced elements, 
components, or steps may be present, or utilized, or combined with other elements, 
components, or steps that are not expressly referenced. 
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CLAIMS 

What is claimed is: 

1 . A method of testing a plant control system comprising: 

providing a control system to be tested, the control system having a controller-I/O 

communication channel and field I/O connectors; 
providing a test system; 

coupling the test system to the control system in a manner which allows the test 
system to communicate with and drive the control system by sending and 
receiving signals via both the controller-I/O communication channel and 
the field I/O connectors. 

2. The method of claim 1 further comprising: 
decoupling the test system from the control system; 

at least partially installing the control system in a plant to be controlled; 
utilizing at least a portion of the test system to validate the operation of the control 
system. 

3. The method of claim 2 wherein validation of the control system involves coupling 
an I/O portion of the test system in place of at least some of the plant's sensors and 
actuators. 

4. The method of claim 2 wherein validation is accomplished by utilizing at least a 
portion of the test system to validate the operation of the control system by having 
the test system provide instructions and questions to one or more plant operators 
thereby instructing them to perform various operations and prompting them to 
enter a description as to how the control system responded to the operations, and 
recording any operator entered descriptions. 

5. The method of claim 4 further comprising a step of causing the test system to 
generate a report indicating which operations where performed and what the 
control system response was for any operations performed. 

6. A method for testing a plant control system having a controller, a sensor input port, 
an actuator output port, a series of communication segments communicatively 
coupling the sensor input port to the controller such that an input signal applied to 
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the sensor input results in one or more signals traveling along each of the 
communication segments so as to notify the controller of the applied input signal, 
and a series of communication segments communicatively coupling the controller 
to the actuator output port such that a control signal generated by the controller 
results in an output signal being applied to the actuator output port, the method 
comprising: 

providing a simulator and coupling the simulator to the control system at at least 
three points, wherein a first point is the sensor input port, a second point is 
a point from which data relating to the internal state of the controller can be 
obtained, and a third point is the actuator output port; 

causing the simulator to apply a signal to the first point and to subsequently obtain 
data on the internal state of the controller and to monitor the actuator output 
port for any applied signals. 

7. The method of claim 6 with the control system further comprising an I/O interface 
wherein coupling the simulator to the control system at the second point involves 
tying the simulator into a network used as a communication segment between the 
controller and the I/O interface. 

8. The method of claim 7 wherein the I/O interface comprises at least two 
analog/digital converters with a first, input converter converting an analog input 
signal applied to the sensor input by the simulator or sensor into a digital signal 
which is transmitted to the controller; and a second, output converter converting a 
digital signal received by the I/O interface from the controller into an analog signal 
which is transmitted to the simulator or actuator. 

9. The method of claim 8 wherein the simulator obtains data on the internal state of 
the controller by establishing a network connection with the controller and 
requesting that the controller report its internal state. 

10. A plant sensor and actuator simulator for use in testing a plant control system 
comprising: 

a configurator having a computer and software for entering and maintaining one or 
more databases including validation requirements and associated test 
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1 1 . The simulator of claim 1 0 wherein the configurator databases comprise data on a 
plurality of plant sensors such that, for each control system sensor input, the 
configurator identifies the range of signals which can be produced by a sensor and 
identifies a series of signals to be used in testing the control system response to signals 
within and without entire range of signals. 

12. A method for training process operators comprising: 

providing a plant comprising a HMI to a control system coupled to plant sensors and 
actuators and controlling a process; 

disconnecting ail of the sensors and actuators from the control system; 

connecting a simulator to the control system in place of the sensors and actuators; 

causing the simulator to simulate various plant events so that the operators can 
interact with the HMI as if such events were actually occuring. 

13. The method of claim 12 wherein the simulator comprises a database of events and 
preferred responses, monitors operator responses to simulated events by monitoring 
the control system's internal state and/or outputs, compares the monitored response for 
a particular event to the preferred response to determine whether the operator 
succeeded or failed to provide the preferred response, and reporting on the operator's 
successes and/or failures in responding to the simulated events. 
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Alnvjnd 


QNum :>Type;. 




A1 


1 H 


Did the analog display symbol flash RED on screen? 


A1 


1 H_E>B 


Is the alarm still active? 


A1 " 


Vh_rtn 


Did the HIGH level alarm clear? * 


01 ' 


1 Dig" 


.Did the alarm activate? 


D1 


1 Dig_RTN Did the alarm reset? 


A1 


1.L 


■Did the analog display symbol flash RED on screen? 


A1 


1 LDB 


: !s the alarm still active? 


A1 


1 L_RTN 


Did the LOW level alarm clear? 


A1 


2 H 


Did the menu button for the display screen flash? 


A1 " ~~ 


2 L 


Did the menu button for the display screen flash? 


A1 


3 H 


Did the alarm text appear on "CURRENT ALARMS"? 


A1 


4 H" 


Did the SCAD A Alarm paging system receive the alarm? (F12 for System 
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21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 



Click on "Test" button and select 
From HMi open valve 106. 
Click on 'Test" button and select 
From HMI close valve 106. 
Click on 'Test" button and select 
From HMI open valve 107. 
Click on Test" button and select 
From HMI close valve 107. 
Click on Test" button and select 
From HMI open valve 108. 
Click on Test" button and select 
From HMI close valve 108. 
Click on Test" button and select 
From HM[ open valve 1 109. 



tag name XV_2001_105_ZCO and read 



tag name XV_2001.J06. ZCO and read 
tag name XV_20bl Ids^ZCO. and read 
tag nam e X \T200 1 
tag name XV_26o| 

tag name XVj20bO08^ZCO jand read 
tag name XVJ2001 



1 07_ZCO and read 

1 6TzCO and read" 



108 ZCO and read 



Click on_Tesfbutton andselecUag name XVJ2001 J09. ZCO and read 
From HMi close valve 109. 



35 ^ 

36 jCiickon TesT button and select tag name XV_2001 J09 _ZCO and r ead 

37 From HMI open valve 110. 



38 Click on Test" button and select tag name XV_2001 J10.ZCQ and read 



39 From HMI close valve 110. 



1 Instauction 1 



Click on Test" button andjteiectteg name XV_2001 J01„ZCO and read 
From HMi close valve 101 . 



5 From HMI open valve 102. 



6 Click on Test" button and select tag name XV_2001 J02_ZCO and read 



7 From HMi close valve 102. 



8 
9 

"10 



Cl ick on Te st" button and s el ect tag name XV__2001 J02.. ZCO and read 
From HMI open valve 103. 



11 



Cl ick on T e st" button and sele ct ta g name X V_2 001 J03_ZCO and read 
From HMi close valve 103. 



I 



19 



1 From HMI open valve 101. 

~2 

V 

4 Click on "Test" button and select tag name XV_2001_101_ZCO and read 



v\ 





2 


12 Click on Test" button and select tag name XV_200t J03JZCO and read 






2 


13 From HMi open valve 104. 


j 




2 


14 Click on Test" button and select tag name XVJ2001 J04_ZCO and read 


;v\ 




2 


15 From HMI close valve 104. 


— i — 




2 


16 Click on Test" button and select tag name XVJ2001 J04_ZCO and read 


;v\, 




2 


17 From HMI open valve 105. 






2 


18 Click on Test" button and select tag name XV_2001 J05_ZCO and read 


iV\ 




2 


19 From HMI dose valve 105. 






2 


40 Click on Test" button and select tag name XV_2001 J10_ZCO and read 






3 


1 Select P1D test from test module menu. Run test for FQITJ2001 _01 . 


iw 




3 


2 Select Totalizer test from test module menu. Run test for FQ1TJ2G01 J31 . 






3 


3 Select Indication test from test module menu. Run test for FQIT_200t J)1. 





3 
3 



4 Select Indication test from test module menu. Run test forTT 2001 01. 



5 Select Indication test from test module menu. Run test for PT 2001 01 . 
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2 Input Manifold J 

3 Filtration 
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5 Output 
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.X ID , : fJ. Section^ Requirement^ ijAias^ 


G.1 


1 : Security requirements related to hardware: 


G.1 


T - "-Tt7 '". . . """ ----- 

2 . Login requirements: 


G.1.2 


1 Password protection required (Yes/No): 


G.1.2 


2 . Protection areas: 


G.1.2 


3 Number of security levels: 


G.1.2 ~ 


4 ; Security level names : 


G.1.2 


5 Configurable levels (Yes/No): 


G.1.2 


6 What can be configured? 


G.1.2" 


7 ; System restrictions: 


G.1.2 


8 Other login requirements: 


G.2 


1 , PLC Specifications: 


G.2.1 


1 . Brand of PLC used: 


G.2.1 " 


2 Type of PLC used: 


G.2.1 


3 PLC quantity: 


G.2 


2 Operating Conditions 1 ; 


G.2.2 


: 1 1 Ambient operating temperature range: I 


G.2.2 


2 Relative humidity range: j 


G.2.2 


3 i RFi requirements: i 


G.2.2 


\ 4 ! Other operating condition requirements: 


G.2 


3 ; Hardware Requirements: 


G.2.3 


1; Mounting requirements: * j 


G.2.3 


2 . Control network type: 


G.2i 


3 Access ports: , 


G.2.3 


4 I/O Network port required? (Yes/No) 


G.2.3 


5 ; Other hardware requirements: j 


G.2 


4 PLC programming software: j 


G.2 


5 i Electrical Specifications : 


G.2.5 


1 1 Power supply: ; 


G.2.5 


2 j Electrical isolation requirements: ; 


G.2.5 


3 1 Wiring requirements: i 


G.2.5 


4j Other electrical requirements: 


iG.2 


. 6 j PLC Alarms: 


G.2.6 


1 { Hardware alarms: 


! ! G.2.6 


I 2 1 Software alarms: 


; G.2.6 


i 3 j LED inidcations for diagnostic points required? 


G.2.6 


i 4 S Other PLC Alarms: 


G.2 


i 7 j Other PLC specific requirements: ; 


SG.3 


; 1} PC Specifications: 


G.3.1 


! 1 jWili a PC be used? (Yes/No) t 


iG.3.1 


2 1 PC manufacturer preference: 


G.3.1 


3 j PC type (e.g., Tower, Desktop, etc.): \ 


G.3.1 


4; PC processor type: 


G.3.1 


5 i RAM (MB) required: j 


G.3.1 


6 i Number of PCs required: j 


:G.3 


2 \ Laptop Specifications: j 


;G.3.2 


1 iWili a laptop be used? (Yes/No) 




09/9 36 0 80 



WO 00/65361 21 /28 PCT/USOO/07962 



901 

providing a control system to be tested, the control system having a controller- 
I/O communication channel and field I/O connectors 



902 

providing a test system 



903 

coupling the test system to the control system in a manner which allows the 
test system to communicate with and drive the control system by sending and 
receiving signals via both the controller-I/0 communication channel and the 

field I/O connectors 
Fig. 19 
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901 

providing a control system to be tested, the control system having a controller- 
I/O communication channel and field I/O connectors 



902 

providing a test system 



903 

coupling the test system to the control system in a manner which 
allows the test system to communicate with and drive the control system by 
sending and receiving signals via both the controller-I/O communication 
channel and the field I/O connectors 



904 

decoupling the test system from the control system 



905 

installing the control system in a plant to be controlled 



906 

utilizing at least a portion of the test system to validate the operation of the 

control system 



Fig. 20 
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901 

providing a control system to be tested, the control system having a controller- 
J/O communication channel and field I/O connectors 



902 

providing a test system 



903 

coupling the test system to the control system in a manner which 
allows the test system to communicate with and drive the control system by 
sending and receiving signals via both the controller-l/O communication 
channel and the field I/O connectors 



904 

decoupling the test system from the control system 



905 

installing the control system in a plant to be controlled 



906b 

utilizing at least a portion of the test system to validate the operation of the 
control system by coupling an I/O portion of the test system in place of at least 
some of the plant's sensors and actuators 
FigT21 
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901 

providing a control system to be tested, the control system having a controller-I/O 
communication channel and field I/O connectors 



902 

providing a test system 



903 

coupling the test system to the control system in a manner which allows the test 
system to communicate with and drive the control system by sending and receiving 
signals via both the controller-I/O communication channel and the field I/O connectors 



904 

decoupling the test system from the control system 



905 

installing the control system in a plant to be controlled 



906c 

utilizing at least a portion of the test system to validate the operation of the control 
system by having the test system provide instructions and questions to one or more plant 
operators thereby instructing them to perform various operations and prompting them to 
enter a description as to how the control system responded to the operations, and 
recording any operator entered descriptions to any questions asked 



causing the test system to generate a report indicating which operations where 
performed, and what the control system response was for any operations performed 



Fig. 22 
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911 

providing a plant control system to be tested, the control system comprising a controller, 
an J/O interface, a sensor input port, an actuator output port, a series of communication 
segments communicatively coupling the sensor input port to the controller such that an 
input signal applied to the sensor input results in one or more signals traveling along 
each of the communication segments so as to notify the controller of the applied input 
signal, and a series of communication segments communicatively coupling the 
controller to the actuator output port such that a control signal generated by the 
controller results in an output signal being applied to the actuator output port 

_ __ 

providing a simulator, the simulator coupled to the control system at at least three 
points, wherein a first point is the sensor input port, a second point is a controller-I/O 
interface network access point from which data relating to the internal state of the 
controller can be obtained, and a third point is the actuator output port 



913 

causing the simulator to apply a signal to the first point and to subsequently 
obtain data on the internal state of the controller and to monitor the actuator 
output port for any applied signals 
Fig. 23 
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921 

providing a plant control system to be tested, the control system comprising a 
controller, a sensor, an actuator, and an I/O interface having a sensor input port and an 
actuator output port wherein the I/O interface and controller are networked together, the 
sensor is electrically coupled to the sensor input port, and the actuator is electrically 

coupled to the actuator output port 



922 

disconnecting the sensor and actuator from the sensor input port and actuator 

output port 



923 

providing a simulator 



924 

networking the simulator with the controller and the FO interface and coupling the 
simulator to the sensor input port and the actuator output port 



925 

causing the simulator to transmit a signal to the controller via the sensor input port while 
monitoring signals transmitted by the controller to the actuator port 



926 

determining any changes in state in the controller caused by the transmitted signal 



Fig. 24 
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931 

providing a control system to be tested 



932 

providing simulated sensor inputs to the control system 



933 

monitoring the control systems response to the simulated sensor inputs by both 
monitoring the control system's actuator outputs and querying the controller for 

information on its internal state 



Fig. 25 
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941 

providing a plant control system to be tested, the control system comprising a controller, 
an input/output (I/O) interface in communication with the controller via a first communications 
channel, the I/O interface comprising a plurality of field I/O connectors; a plurality of sensors, and 
a plurality of actuators, wherein the plurality of sensors and the plurality of actuators are coupled 
to the field IO connectors via field wiring harnesses, and wherein the controller transmits signals 
to the actuators by transmitting a signal via the first communication channel to the I/O interface 

and the I/O interface transmitting a corresponding signal to the actuators via the field wiring 
harnesses, and the sensors send signals to the controller by sending a signal via the field wiring 
harnesses to the I/O interface and the I/O interface sending a corresponding signal to the controller 

via the first communication channel 

— — 

providing a simulator capable of duplicating the signals sent by the sensors to the controller and 

capable of receiving the signals sent by the controller to the actuators 

— 

disconnecting at least some of the plurality of actuators and/or at least some of the 
plurality of sensors from the I/O interface 

944 

coupling the simulator to the I/O interface in place of at least some of the disconnected 
actuators and/or sensors 

945 

causing the simulator to sending signals to the controller via the I/O interface wherein the 

sent signals have similar characteristics to signals which the disconnected sensors could send 

_ 

causing the simulator to receive signals from the controller via the I/O interface wherein the 
received signals have similar characteristics to signals which would be received by the 
disconnected actuators 

947 

monitoring the signals received by the simulator from the controller via the I/O interface 

948 

comparing the received signals to an expected value stored in a requirements database 

Fig. 26 
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including the claims, as amended by any amendment referred to above. 

I acknowledge the duty to disclose information, which is material to patentability as defined in 37, 
Code of Federal Regulations, Section 1.56. 

CLAIM FOR BENEFIT OF PRIOR U.S. PROVISIONAL APPLIC ATION(S) 

(35U.S.C. Section 119(e)) 

I hereby claim the benefit under Title 35, United States Code, Section 1 19(e) of any United States 
provisional application(s) listed below: 



PROVISIONAL APPLICATION NUMBER 

60/126,060 

INTERNATIONAL APPLICATION NUMBER 

PCT/US00/07962 



FILING DATE 

March 25, 1999 
FILING DATE 

March 23, 2000 



POWER OF ATTORNEY 

I hereby appoint the following practitioners) to prosecute this application and transact all business 
in the Patent and Trademark Office connected therewith. 



APPOINTED PRACTITIONERS) 
Robert D. Fish 
David J. Zoetewey 
Sandra Poteat 



REGISTRATION NUMBER(S) 
3 3.880 

45^258. V "2 \ 
46,264 




I hereby appoint the practitioners) associated with the Customer Number provided below to 
prosecute this application and to transact all business in the Patent and Trademark Office connected 
therewith. 



SEND CORRESPONDENCE TO DIRECT TELEPHONE CALLS TO: 

Robert D. Fish 
714-641-5100 

Robert D. Fis h,, 

Rutan & Tucker , LLP 

6LLAntan Blvd., 14 th Floor 

ROrEox-WSO 

Costa Mesa. CA 92626 

US 

Cust omer Numbe r 24392 



DECLARATION 

i 



I hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these statements were 
made with the knowledge that willful false statements and the like so made are punishable by fine or 
imprisonment, or both, under Section 1001 of Title 18 of the United States Code, and that such willful false 
statements may jeopardize the validity of the application or any patent issued thereon. 
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Inventor's signature 




Date. Country of Citizenship US A 

Residence Richland, WA US (/lin 

Post Office Address Fluor Corporation, 1 135 Jadwin Ave., MSIN B2-67, Richland, WA 99352 US 



StephenG. Romgro ^^C^/Lj 



tephen G. Rom 
Inventor's signature 

p ff ^o 7^ jl I tyPols Country of Citizenship US 

Residence Richland, WA 99352 Lj\ , 

Post Office Address Fluor Corporation, 1 135 Jadwin Ave., MSIN B2-67, Richlan d, WA 99352 US 




3^ 

Christo^^ 

Inventor's signature 




Country of Citizenship US 




Residence Berkley, CA US 
Post Office Address Fluor Coiporation, 1 135 Jadwin Ave, MSIN B2-67, Richlancj, WA 99352 US 
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Inventor's signature 

Date fo2— Country of Citizenship US 

Residence Valdez, AK US 

Post Office Address Fluor Corporation, 1 135 Jadwin Ave., MSIN B2-67, Richland, WA 99352 US 
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